2005

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, a

FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijac

Stack-based buffer overflow in the CSmil1Parser::testAttributeFailed function in smlparse.cpp for RealNetworks RealPlaye

Firefox 1.0 allows remote attackers to execute arbitrary code via plugins that load "privileged content" into frames, as

Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5,

Buffer overflow in Microsoft Word 2000, Word 2002, and Word 2003 allows remote attackers to execute arbitrary code via a

Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code

Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V

Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string speci

Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execu

The StgCompObjStream::Load function in OpenOffice.org OpenOffice 1.1.4 and earlier allocates memory based on 16 bit leng

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass li

The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain p

Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary

The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can resul

Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences.

Firefox 1.0.3 allows remote attackers to execute arbitrary Javascript in other domains by using an IFRAME and causing th

The install function in Firefox 1.0.3 allows remote web sites on the browser's whitelist, such as update.mozilla.org or

Integer overflow in the ELF parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a cra

Buffer overflow in the PE parser in HT Editor before 0.8.0 allows remote attackers to execute arbitrary code via a craft

Sophos Anti-Virus 3.93 does not check downloaded files for viruses when they have only been written, which creates a rac

Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary cod

The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing a

Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute a

Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising secur

Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions

Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07

Heap-based buffer overflow in rtffplin.cpp in RealPlayer 10.5 6.0.12.1056 on Windows, and 10, 10.0.1.436, and other vers

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 (6.0.12.1040 through 1069), RealOne Player v1 and v2

Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into

A design error in Opera 8.01 and earlier allows user-assisted attackers to execute arbitrary code by overlaying a malici

Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers t

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web

Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibl

Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user

Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks,

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted

Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via

Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unau

The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbit

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code vi

Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to exec

Multiple interpretation error in unspecified versions of Kaspersky Antivirus allows remote attackers to bypass virus det

Multiple interpretation error in unspecified versions of BitDefender Antivirus allows remote attackers to bypass virus d

Multiple interpretation error in unspecified versions of NOD32 Antivirus allows remote attackers to bypass virus detecti

Multiple interpretation error in unspecified versions of F-Prot Antivirus allows remote attackers to bypass virus detect

Multiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detecti

Multiple interpretation error in unspecified versions of McAfee Antivirus allows remote attackers to bypass virus detect